Merge changes I0c8d4018,Ic9dfb243,I7e442b06

* changes:
  DO NOT MERGE. Recursively restorecon when SELinux label changes.
  DO NOT MERGE. Ignore setxattr() failures on tmpfs.
  DO NOT MERGE. Record "cache" inodes to clear while CE is locked.